Protecting the Integrity of Log Entries in a Distributed System

A method for protecting an integrity of log entries generated by a first device in a distributed system, the method comprising:

• receiving, at a first or device associated with a first domain, a first secret key from a central management system;
• storing, at the first device, the first secret key in non-volatile memory of the first device;
• generating, at the first device, a second secret key using a secure key calculation, the second secret key configured to be shared with a plurality of devices within the first domain;
• storing, at the first device, the second secret key in volatile memory of the first device;
• generating, at the first unit or device, a first integrity protection key based on the first and second keys;
• generating, at a first device, a first broadcast encryption key based on the second key;
• generating, at the first device, a security sensitive log entry;
• generating, at the first device, an integrity protection tag based on the security sensitive log entry using the first integrity protection key;
• generating, at the first device, a protected log entry based on the security sensitive log entry and the integrity protection tag using the first broadcast encryption key;
• and
• broadcasting, at the first unit or device, the protected log entry to the plurality of devices within the first domain.